CVE-2020-1887 - Incorrect validation of the TLS SNI hostname in osquery versions after 2.9.0 and before 4.2.0 could allow an attacker to MITM osquery traffic in the absence of a configured root chain of trust

Back Back to CVE browser

CRITICAL

Incorrect validation of the TLS SNI hostname in osquery versions after 2.9.0 and before 4.2.0 could allow an attacker to MITM osquery traffic in the absence of a configured root chain of trust

Published Mar 12, 2020

9.1

CRITICAL

CVSS 3.1

EPSS 1.57%

Description

Incorrect validation of the TLS SNI hostname in osquery versions after 2.9.0 and before 4.2.0 could allow an attacker to MITM osquery traffic in the absence of a configured root chain of trust.

Affected products

Vendor Facebook Product Osquery Default
n/a
- Version
  2.9.0
  Status
  affected
  Constraints
  -
- Version
  4.2.0
  Status
  affected
  Constraints
  -
- Version
  next of 2.9.0
  Status
  affected
  Constraints
  <unspecified

Default status is the baseline for the product, each version can override it (e.g. patched versions marked unaffected).

Vendor

Product

Default status

Versions

Facebook

Osquery

n/a

Version	Status	Constraints
2.9.0	affected	-
4.2.0	affected	-
next of 2.9.0	affected	<unspecified

Remediation

No remediation recorded yet.

Weaknesses (2)

CWE-295

Improper Certificate Validation

CWE-297

References (2)

https://github.com/osquery/osquery/pull/6197
x_refsource_CONFIRMPatchThird Party Advisory
https://www.facebook.com/security/advisories/cve-2020-1887
x_refsource_CONFIRMThird Party Advisory

Link	Providers	Tags
https://github.com/osquery/osquery/pull/6197		x_refsource_CONFIRMPatchThird Party Advisory
https://www.facebook.com/security/advisories/cve-2020-1887		x_refsource_CONFIRMThird Party Advisory